Hijack site with malware

[FlebusJones]

I have been using this site for years and no problems. It is ON3.com and ON3.com/gamecockcentral   I am getting the following popups from the Browser Guard.  The owners of the site don't know what is going on.  This is happening on 2 different devices and 3 different browsers.  I cleaned the cache and reset the browser guard and still get it a day later.  When I bypass the block, I can't post messages on the message boards because apparently the MWB is preventing my outgoing mail from the website.  Any ideas would be appreciated.

 

[Dashke]

The website is infected. Here is a screenshot of the malicious scripts -

[FlebusJones]

Thank you Dashke for the assistance.  Got any idea what this code is trying to do with the malicious script?  If I continue to go to the website, what type of risk will I have?  Thanks again.

[Metallica]

The script is hosted on a site that is known to be involved in Tech Support Scams. So at the moment you can expect fake warnings about your computer security, but the hijackers can change the script at any moment.

[on3tech]

Hey all,

I head up the tech team at on3. 

The team found 3 articles that had some malicious code in them. They were articles that were migrated from a previous site

Here are the 3 articles

https://www.on3.com/teams/usc-trojans/news/pac-12-media-day-is-here/
https://www.on3.com/teams/usc-trojans/news/wearesc-roundtable-10-18/
https://www.on3.com/teams/usc-trojans/news/lawrence-jackson-all-american-all-world/

We've removed the eval scripts from these articles and also searched the database for anymore evals. Everything should be cleaned up now. 

[FlebusJones]

Fantastic!  Thanks for the heads up.  Appreciate it.

[on3tech]

@Metallica or @Dashke is there anything that we can do to have this block removed? It seems as if a lot of users are seeing issues when navigating to our site. We have cleaned up all of the old script tags. 
 

[miekiemoes]

Hi,

The block will be removed. 

[on3tech]

Thank you.